Cyber Security Program Manager

Overview

Who we are

Toyota does not offer support or sponsorship of job applicants for employment-based visas or any other work authorization for this role now or in the future. You must have the right to work in the United States and not require Toyota support or sponsorship for immigration-related employment (e.g., H-1B, O-1, E-3, H-1B1, TN, F-1 OPT, F-1 STEM OPT, F-1 CPT, TN, ‘job flexibility benefits’ (also known as I-140 or Adjustment of Status portability), etc. now or in the future. You should not apply for this role if you will require Toyota to assist with immigration support or sponsorship now or in the future.

Who we’re looking for

Toyota’s Cyber Security Department is looking for a passionate and highly motivated Cyber Security Program Manager.

As the Cyber Security Program Manager, Cyber Security, you will serve as a strategic leader accountable for both the hands-on delivery of complex cybersecurity initiatives and the enterprise-level orchestration of multiple interrelated programs. This role is responsible for ensuring cybersecurity efforts are aligned to business strategy, risk priorities, compliance obligations, and long-term technology roadmaps.

You will lead cross-functional planning and execution across security engineering, architecture, infrastructure, risk, compliance, release management, vendors, procurement, and business stakeholders. In addition to owning day-to-day delivery execution, you will establish governance, drive prioritization, remove barriers, and influence decisions that impact the cybersecurity portfolio across the enterprise.

This role requires deep program management capability, strong cybersecurity domain knowledge, excellent stakeholder leadership, and the ability to operate with a high degree of autonomy across complex and ambiguous environments. You are expected to balance tactical execution with strategic leadership, ensuring both immediate delivery commitments and long-term program outcomes are achieved.

What you’ll be doing

These are accountabilities you are solely responsible for and will execute daily/weekly:

• Project and Program Delivery Execution: Lead the full delivery lifecycle for complex cybersecurity initiatives, including planning, execution, dependency management, milestone tracking, and delivery oversight across multiple workstreams. Ensure committed objectives, timelines, and quality standards are met.

• Agile Cadence and Delivery Management: Drive the daily project cadence, including stand-ups, sprint planning, backlog refinement, sprint reviews, and retrospectives. Ensure work is prioritized appropriately, delivery progress is transparent, and impediments are escalated and resolved quickly.

• Risk, Issue, and Dependency Management: Proactively identify, document, assess, and manage risks, issues, assumptions, and dependencies using structured frameworks such as RAID logs. Anticipate bottlenecks, implement corrective actions, and maintain delivery momentum across competing priorities.

• Budget and Financial Management: Own and manage project and program budgets across all cost categories, including labor, technology, professional services, and vendor spend. Monitor actuals versus forecast, identify variances, and take corrective action to maintain financial alignment.

• Executive and Stakeholder Reporting: Provide clear, timely reporting to executive, management, and team-level stakeholders on scope, schedule, budget, quality, risks, and decisions. Maintain dashboards, scorecards, and program communications that support informed decision-making.

• Release, Change, and Deployment Coordination: Partner with Release Management and other delivery teams to ensure cybersecurity deliverables move through release and change governance processes successfully. Confirm readiness, manage dependencies, and ensure all artifacts and approvals are aligned with enterprise controls.

• Compliance and Governance Oversight: Ensure cybersecurity initiatives are delivered in alignment with applicable regulations, standards, and internal policies such as NIST, GDPR, HIPAA, PCI-DSS, and enterprise control requirements. Partner with GRC, compliance, and risk teams to embed security obligations into execution.

• Vendor and Procurement Management: Manage third-party vendors and service providers to ensure contracted work is delivered on time, within scope, and to quality expectations. Support vendor selection, SOW development, milestone tracking, and performance reviews.

• Intake Prioritization and Portfolio Coordination: Own the cybersecurity intake process by triaging, categorizing, and prioritizing incoming requests. Ensuring work is aligned to business objectives, strategically sequenced, and appropriately resourced.

Shared Responsibilities

These are areas where you actively participate and drive execution in partnership with other teams or leadership:

• Strategic Roadmap Alignment: Partner with leaders across cybersecurity, technology, and business functions to maintain and evolve the cybersecurity product and project roadmap in alignment with enterprise priorities.

• Cross-Functional Program Leadership: Lead multiple interdependent cybersecurity initiatives across engineering, architecture, operations, compliance, legal, procurement, and business teams to ensure alignment and execution against shared goals.

• Governance and Decision Forums: Establish and operate program governance routines, escalation paths, dependency reviews, and decision-making forums to keep work moving and resolve cross-functional blockers.

• Resource and Priority Tradeoff Management: Collaborate with senior stakeholders to evaluate competing demands, resource constraints, sequencing options, and delivery tradeoffs. Provide recommendations that balance business value, risk reduction, and feasibility.

• Organizational Alignment: Influence senior leaders and partners across the enterprise to drive clarity, commitment, and accountability for cybersecurity outcomes.

Periodic Responsibilities

These are areas you facilitate on a recurring or as-needed basis to support broader organizational maturity:

• Process Improvement and Delivery Maturity: Identify and implement improvements to planning, execution, governance, and reporting processes that increase predictability, transparency, and efficiency across cybersecurity programs.

• Coaching and Mentorship: Serve as a subject matter resource to project and program teams, sharing best practices and mentoring others on delivery methodology, risk management, and execution discipline.

• Tooling and Data Integrity: Use tools such as Jira, Confluence, Microsoft Project, Power BI, and related platforms to manage plans, track progress, and maintain accurate program data and reporting.

• Strategic Influence: Influence cybersecurity priorities, sequencing, and long-term planning by surfacing risks, tradeoffs, and investment implications to senior leadership.

• Executive Escalation Management: Prepare clear recommendations and decision support materials for senior stakeholders when issues, conflicts, or tradeoffs require executive attention.

What you bring

• Bachelor’s degree in computer science, information technology, cybersecurity, engineering, or a related field, or equivalent experience.

• 8+ years of progressive experience in project or program management, including extensive experience in complex, cross-functional environments.

• 5+ years of experience leading cybersecurity, IT, or technology initiatives through the software development lifecycle.

• Strong experience managing multiple concurrent projects or programs with interdependent deliverables, competing priorities, and executive stakeholders.

• Proven ability to lead planning, execution, budgeting, risk management, and governance for complex technology initiatives.

• Demonstrated success influencing without direct authority and partnering effectively with senior leaders.

• Excellent communication, analytical, organizational, and problem-solving skills.

• Strong judgment and ability to operate independently in fast-moving, ambiguous environments

Added bonus if you have

• Master’s degree in a related field such as cybersecurity, computer science, engineering, or information technology.

• Experience leading enterprise cybersecurity programs in regulated industries such as financial services, banking, insurance, or automotive.

• Industry certifications such as CISSP, CISM, CISA, or PMP.

• Experience building or improving cybersecurity operating models, governance mechanisms, or portfolio processes.

• Familiarity with cloud security, identity and access management, vulnerability management, third-party risk, or security architecture programs.

What we’ll bring 

During your interview process, our team can fill you in on all the details of our industry-leading benefits and career development opportunities.

A few highlights include:
• A work environment built on teamwork, flexibility and respect

• Professional growth and development programs to help advance your career, as well as tuition reimbursement

• Team Member Vehicle Purchase Discount

• Toyota Team Member Lease Vehicle Program (if applicable)

• Comprehensive health care and wellness plans for your entire family

• Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota regardless of whether you contribute

• Paid holidays and paid time off

• Referral services related to prenatal services, adoption, childcare, schools and more

• Tax Advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA)

• Relocation assistance (if applicable)

Belonging at Toyota

Our success begins and ends with our people. We embrace all perspectives and value unique human experiences. Respect for all is our North Star. Toyota is proud to have 10+ different Business Partnering Groups across 100 different North American chapter locations that support team members’ efforts to dream, do and grow without questioning that they belong.

Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, military or veteran status, or any other characteristics protected by law.

Have a question, need assistance with your application or do you require any special accommodations? Please send an email to talent.acquisition@toyota.com.